Re: [ja-discuss] プレスリリース原稿：OpenOffice.org1.1.xセキュリティホール対策について

[Takamichi Akiyama]

Tora$B$G$9!#(B
(B
$B$*Hh$lMM$G$9!#(B
(B
(B> OpenOffice.org$B$NMxMQ[EMAIL PROTECTED];$s$+!#(B
(B
$B$=$7$F!"MxMQ$K$J$l$P$J$k$[$I!"$$$d$H$$$&$[$I!"$3$NpJsDs6!$N5!2q$,A}$($F(B
$B$/$k$3$H$G$7$g$&!#$$$A$$$AMxMQ$N3HD%;R$,(B .doc
$B$*$h$S(B .dot $B$N%U%!%$%k(B)
(B
(B2. Louis $B$5$s$+$i$N0J2<$N(B2$B9T$N>pJs$rK]LuE>:\$*4j$$$$$?$7$^$9!#(B
(BSee the security advisory for more information:
(Bhttp://www.securityfocus.com/archive/1/395516
(B
(B3. $B!V(BStgCompObjStream?::Load()$B!W%U%!%s%/%7%g%s(B $B"*(B 
$B!V(BStgCompObjStream::Load()$B!W%a%=%C%I(B
(B# $B86J8$,(B function [EMAIL PROTECTED]"!"!"(Bmethod $B$,@52r$J$N$K!#!#!#(B
(B
(B4. [EMAIL PROTECTED](B
(Bhttp://util.openoffice.org/source/browse/util/sot/source/sdstor/stgole.cxx?r1=1.4&r2=1.4.166.1
(B
(B
(B===
$B$"$*$i$J$$$h$&$K$7$^$7$g$&$h!#$HKAF,$G$O=q$-$^$7$?$,!"%=!<%9%3!<%I$H$=$N(B
(B[EMAIL PROTECTED];%-%e%j%F%#%[!<%k$N2U=j!K$,$3$s$J$K$b!V%*!<[EMAIL 
(BPROTECTED]"(B
$B5;=QE*$K$O4JC1$K!"0-0U$N$"$k(B .doc $B%U%!%$%k$r:[EMAIL 
(BPROTECTED]&$G$9$M!#(B
(B
$B$?$^$?$^:#2s$K8B$C$F$O!"LdBj$N$"$k%3!<%I(B
(B sal_Char* p = new sal_Char[ (USHORT) nLen1 ]; // 
$B2<0L(B16$B%S%C%H$NCM$G%a%b%j(B($B%P%C%U%!(B)$B$r3d$jEv$F(B
(B if( Read( p, nLen1 ) == (ULONG) nLen1 )  // [EMAIL PROTECTED];H$C$F$$$k!#(B
$B$K$h$C$F3NJ]$5$l$k!V%P%C%U%!!W$N%a%b%j>e$N%"%I%l%9$,!"$"$i$+$8$aM=B,$7$K(B
$B$/$$$&$(!"%P%C%U%!$N0LCV$,!"$h$/[EMAIL 
(BPROTECTED]/!WNN0h$G$O$J$/$F!V%R!<%W!W(B
$BNN0h$G$"$k$?$a!";ve!"0-0U$N$"$k%3!<[EMAIL PROTECTED](B
(B
$B$=$N$?$a!"0-0U$N$"$k(B.doc$B%U%!%$%k$NFI$_9~$_$K$h$C$F!"(BOOo 
$B$NF0:n$,$*$+$7$/(B
$B$J$C$?$j!"0[>o=*N;$7$F$7$^$&!#$H$$$&%l%Y%k$N$h$&$G$9!#(B
(B
$B0J2<$N$h$&$JIT6q9g$,!V%P%C%U%!%*!<%P!<%U%m!e5-$N%3!<%I$GJQ?t(B nLen1 $B$K(B10$B?J?t$N(B 100000 
$B$,BeF~$5$l$F$$$?$H2>Dj$7$^$9!#(B
(B10$B?J?t$N(B 100000 
$B$O!"(B32$B%S%C%H$N(B16$B?J?t$GI=8=$9$k$H!"(B000186A0 $B$G$9!#(B
$B2<0L([EMAIL PROTECTED]$9$H(B 
(B34464 $B$G$9!#(B
$B$H$$$&$3$H$O!"(B1$B9TL\$G(B 34464 
$B%P%$%HJ,$N%a%b%j!J%P%C%U%!!K$,3NJ]$5$l$^$9!#(B
$B$H$3$m$,!"(B2$B9TL\$G(B 100000 
$B%P%$%HJ,FI$_9~$s$G$7$^$&$N$G!"(B34465$B%P%$%HL\$+$i(B
(B100000$B%P%$%HL\$^$G$N!"$=$3$K85$+$i$"$C$?%a%b%j%G!<%?$,[EMAIL PROTECTED](B
(B
(Bhttp://www.securityfocus.com/archive/1/395516 $B$N5-;[EMAIL PROTECTED]"(B
(Band when free happened ,will cause write pointer,maybe cause arbitrary code 
(Bexcute .
$B$H$"$j$^$9$,!"!"!"NY$N6u$-%a%b%j$N4IM}%G!<%?$r>h$C<[EMAIL PROTECTED](B
$B$H$3$m$G!"(BOOo$B$rK=Av$5$;$k$3$H$O4JC1$K$G$-$=$&$G$9$,!"$^$7$F$d<+J,$N(B
$B;[EMAIL PROTECTED]<%I$K=hM}$r0\9T$5$;$k$3$H$O!"!"!"$[$\L5M}$G$7$g$&!#!#!#(B
(B
(BTora
(B
(BYutaka Kachi wrote:
(B> catch$B$G$9(B
(B> $B%W%l%9%j%j!<%9869F$G$9!#(B
(B> $B3'$5$s$N%l%S%e!<$r$*4j$$$7$^$9!#(B
(B> 
(B> ===========================================================================
(B> $B%W%l%9%j%j!<%9(B
(B> $BJsF;4X78http://ja.openoffice.org/
(B> 
(B> $B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
(B> 
(B>                 OpenOffice.org1.1.x$B%;%-%e%j%F%#%[!<%kBP:v$K$D$$$F(B
(B>                         http://ja.openoffice.org/
(B> 
(B> $B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
(B> 
(B> $B%*!<%W%s%=!<%9$NE}9g%*%U%#%9%=%U%H(BOpenOffice.org$B$r3+H/$9$k(BOpenOffice.org
(B> $B%3%_%e%K%F%#$O!"(BOpenOffice.org1.1.x$B$N%;%-%e%j%F%#%[!<%k$H$=$NBP:v%W%m%0(B
(B> $B%i%`$rH/I=$7$^$7$?!#$3$l$O!"!V%R!<%W%*!<%P!<%U%m!<[EMAIL PROTECTED]<[EMAIL 
(B> PROTECTED]"(B
(B> Microsoft Word$B$N(BDoc$B%U%!%$%k$G:Y9)$,;[EMAIL PROTECTED]"G$0U$N(B
(B> $B%W%m%0%i%`$r]%P!<%8%g%s(B
(B> 
(B> * OpenOffice.org 1.1.x$B!J(BWindows, Linux, Solaris x86/Sparc, Mac 
(B> OS/X$B!K(B
(B> * OpenOffice.org 2.0 $B%Y!<%?!&3+H/HG!J(BWindows, Linux, Solaris x86/Sparc,
(B> Mac OS/X$B!K(B
(B> 
(B> 
(B> $B"#8=>](B
(B> Writer$B$K4^$^$l$F$$$k!V(BStgCompObjStream?::Load()$B!W%U%!%s%/%7%g%s$KLdBj$,(B
(B> $B$"$j!":Y9)$r;\$5$l$?(BDoc$B7A<0$N%U%!%$%k$r3+$/$H%R!<%W%*!<%P!<%U%m!<$,H/@8(B
(B> $B$7$F!">l9g$K$h$C$F$OG$0U$N%3!<%I$rhttp://ja.openoffice.org/1.1.4/security.html
(B> 
(B> 
(B> $B"#K\7o$K4X$9$k$*Ld$$9g$o$;@h!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
(B> OpenOffice.org$BF|K\%f!<%6!<2q(B 
(B> $B$N2<5-Ld$$9g$o$;MQ%a!<%k%"%I%l%9$^$G$*4s$;(B
(B> $B$/[EMAIL PROTECTED](B
(B> 
(B>     [EMAIL PROTECTED]
(B>     $BC4Ev(B:$B2DCN(B $BK-(B
(B> 
(B> OpenOffice.org$B$N>pJs$r$*CN$i$;[EMAIL 
(B> PROTECTED]<%j%s%0%j%9%H$r$4MQ0U$7$F$*$j$^(B
(B> $B$9!#$3$N%a!<%j%s%0%j%9%H$O!"(BOpenOffice.org$B$d%*!<%W%s%=!<%9$K4X$9$k>pJs$r(B
(B> $B$*FO$1$9$k$b$N$G$9!#(BOpenOffice.org$B$NF08~$K6=L#$r$*;}$A$G$7$?$i!"http://ja.openoffice.org/ml_info.html
(B> 
(B> $B:#8e!"$3$N%W%l%9%j%j!<%9$,$4ITMW$G$"$l$P!"$4O"Mm$/[EMAIL PROTECTED](B
(B> ===========================================================================
(B
(B
(B---------------------------------------------------------------------
(BTo unsubscribe, e-mail: [EMAIL PROTECTED]
(BFor additional commands, e-mail: [EMAIL PROTECTED]